General
- Target 2026-07-07_41816a785b0b8cc7f930903640766b99_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_vidar
- Size 880KB
- Sample260707-ttj4daas5m
- SHA256 7b8a085d3df65d8115fc387fcf51bd87e048d81e5389f9ee203cec8a515f87fc
- MD5 41816a785b0b8cc7f930903640766b99
- SHA1 bebe339268887f378d301c771dfc9268bd5e4146
- SHA512 14ad8f5b12ec3044fff8dafd52a025dfaf4d1612f819ae72c945a30946f0d088d39793d267ce8d05757862462360144ffbed19d44319b496bcc937c62567c0f8
- SSDEEP 12288:72MV7IPXiZwb5zzFEoS2cPvytbp/ccJtK5TvsI4c9V5v5fM:7f1IPSZM9zFVSOPyv/L9VTk
- TLSH T155158D51B3D404B4E57396359A658A22E97ABC150B60CECF13D42A7A0F337C0AE39F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_41816a785b0b8cc7f930903640766b99_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_41816a785b0b8cc7f930903640766b99_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_41816a785b0b8cc7f930903640766b99_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_vidar
- Size 880KB
- SHA256 7b8a085d3df65d8115fc387fcf51bd87e048d81e5389f9ee203cec8a515f87fc
- MD5 41816a785b0b8cc7f930903640766b99
- SHA1 bebe339268887f378d301c771dfc9268bd5e4146
- SHA512 14ad8f5b12ec3044fff8dafd52a025dfaf4d1612f819ae72c945a30946f0d088d39793d267ce8d05757862462360144ffbed19d44319b496bcc937c62567c0f8
- SSDEEP 12288:72MV7IPXiZwb5zzFEoS2cPvytbp/ccJtK5TvsI4c9V5v5fM:7f1IPSZM9zFVSOPyv/L9VTk
- TLSH T155158D51B3D404B4E57396359A658A22E97ABC150B60CECF13D42A7A0F337C0AE39F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.